{"id":"CVE-2026-48333","aliases":["EUVD-2026-52518","GHSA-rxfg-j664-gqpp"],"status":"published","title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00946,"percentile":0.61427,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2026-08-03T22:37:06Z","modified":"2026-10-23T23:10:00Z","products":[{"vendor":"adobe","product":"adobe campaign classic"},{"vendor":"adobe","product":"campaign"}],"references":[{"url":"https://helpx.adobe.com/security/products/campaign/apsb26-120.html","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48333"},{"url":"https://github.com/advisories/GHSA-rxfg-j664-gqpp"}],"sources":{"cve":[{"id":"CVE-2026-48333","title":"Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","status":"published","published":"2026-08-03T22:37:06.245Z","modified":"2026-08-27T22:34:00.258Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:19:47.998488Z"}],"euvd":[{"id":"EUVD-2026-52518","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","status":"published","published":"2026-08-03T22:37:06Z","modified":"2026-08-27T22:34:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:01:25.178519Z"}],"ghsa":[{"id":"GHSA-rxfg-j664-gqpp","title":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could...","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","status":"published","published":"2026-08-04T00:34:54Z","modified":"2026-08-04T00:35:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:10:03.433591Z"}],"nvd":[{"id":"CVE-2026-48333","description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.","status":"published","published":"2026-08-03T23:16:46.567Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:12:34.643497Z"}]}}